The Indian cyber machinery, in collaboration with famous French security researcher and hacker Elliot Alderson has claimed to have plugged a major data leak over the last nine days, according to a report from The Hindu.
Alderson had, on 10 March, tweeted that two Indian government websites were leaking document IDs, including Aadhaar cards. One website was claimed to have leaked 300,000 documents while another was said to leak 5,000 IDs, Alderson tweeted.
Hi @UIDAI and @IndianCERT,— Elliot Alderson (@fs0c131y) March 11, 2019
Today, I celebrate the 100,000 followers. I want to invite you to the party and because I'm a nice guy, I will do you a favor. 2 #Indian governmental websites are leaking 300,000 and 5,000 documents IDs including #Aadhaar cards. Contact me by DM for...
Alderson had tweeted that in order to celebrate his 100,000 followers, he would expose the leak. He further asked people to inbox him on Twitter for details. He gave a deadline of one week for people to respond to his tweet, but clarified that he would not disclose the details to journalists.
...the details and to give me the opportunity to disclose the issue responsibly. As personal information are at risk you have 1 week.— Elliot Alderson (@fs0c131y) March 11, 2019
Your worst nightmare,
PS: If you are a journalist no need to contact me, I will not disclose the details now.— Elliot Alderson (@fs0c131y) March 11, 2019
The Hindu reports that sources said the matter was discussed at the highest levels of the Indian government, after which contact was established with Alderson for a "top secret operation to identify and plug the leaks."
On Monday, 18 March, Anderson confirmed that the issues have been fixed and the documents of 305,000 have been secured.
Thanks to all the people involved, the issues has been fixed and the personal documents of 305,000 has been secured.— Elliot Alderson (@fs0c131y) March 18, 2019
When we are working together, we can achieve great things! https://t.co/Qqdc9qf6r8
Alderson is known for being critical of the Aadhaar system. He has often called out the UIDAI, saying that it is a security risk as it stores all the personal details of Indians in one common server.
(With inputs from The Hindu)
. Read more on Tech News by The Quint.RSS & BJP’s Nehru-Netaji ‘Cosplay’: Irony Dies a Thousand DeathsNirav Modi Arrested: What Happens Next in the Extradition Process? . Read more on Tech News by The Quint.